NetSight
low3.3

CVE-2022-33688

Sensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR Jul-2022 Release 1 allows local attackers with log access permis…

Impact

Sensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR Jul-2022 Release 1 allows local attackers with log access permission to get IMSI through device log.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 10.0, 11.0, 12.0

Weakness classification

References